Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/_6v_T5nIijgaIO5OwS3HToDzE-I.roa
File:                     _6v_T5nIijgaIO5OwS3HToDzE-I.roa (raw, json)
Hash identifier:          VPO5z7TldEyN75TTD/b8SOsX4lHgIYWjuqumkVlMOFw=
Subject key identifier:   FF:AB:FF:4F:99:C8:8A:38:1A:20:EE:4E:C1:2D:C7:4E:80:F3:13:E2
Certificate issuer:       /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial:       018968435B5D5B09863027FE0686E001750A
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/_6v_T5nIijgaIO5OwS3HToDzE-I.roa
Signing time:             Tue 18 Jul 2023 09:09:51 +0000
ROA not before:           Tue 18 Jul 2023 09:09:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8075
IP address blocks:        185.187.104.0/24 maxlen: 24
                          185.187.105.0/24 maxlen: 24
                          185.187.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:68:43:5b:5d:5b:09:86:30:27:fe:06:86:e0:01:75:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
        Validity
            Not Before: Jul 18 09:09:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ffabff4f99c88a381a20ee4ec12dc74e80f313e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:d6:14:09:7b:ef:4e:e9:b2:f3:01:ab:e4:
                    53:4e:53:0e:3e:25:48:54:61:00:0e:bf:40:c5:27:
                    b3:6d:be:6c:0d:6c:a9:ab:07:13:e7:06:75:a9:49:
                    1b:d5:0c:b5:fd:dc:1e:ca:76:9e:14:bf:aa:d1:99:
                    6b:6b:3f:a9:98:3a:bd:ac:02:d4:ed:ba:53:76:2c:
                    3c:9e:e7:ec:6a:e8:bf:e3:af:db:f6:27:26:4d:be:
                    bd:14:b3:ac:77:c7:30:7d:57:8e:a3:b0:5e:04:15:
                    98:2e:7c:30:af:00:a5:4f:c6:7a:31:af:1b:a3:5e:
                    c7:a2:00:2a:0b:3c:15:75:42:69:19:53:dd:9d:6d:
                    a1:ea:10:e4:2c:2c:7e:09:1d:43:bb:1f:ac:42:e8:
                    ce:63:d2:0a:34:3e:6f:d9:69:ba:35:f8:60:20:7b:
                    4a:47:6a:f5:b9:fc:5e:c1:fb:bb:34:13:90:65:1e:
                    df:f3:9b:0d:4c:9e:8d:76:d1:49:73:19:26:79:ff:
                    2b:84:d1:8c:82:c8:84:df:9c:74:13:14:c2:a5:e7:
                    5d:85:1e:12:5f:63:2c:a1:a2:15:d2:67:2f:f5:e6:
                    43:a3:e6:0e:c5:c2:cc:9e:1a:07:47:4d:94:6e:8b:
                    eb:dd:44:09:a6:08:f3:01:66:65:d9:62:41:31:a6:
                    0f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AB:FF:4F:99:C8:8A:38:1A:20:EE:4E:C1:2D:C7:4E:80:F3:13:E2
            X509v3 Authority Key Identifier:
                keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/_6v_T5nIijgaIO5OwS3HToDzE-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.104.0-185.187.106.255

    Signature Algorithm: sha256WithRSAEncryption
         9d:bd:72:f7:db:8f:f9:83:89:50:41:f6:bf:a4:d5:1f:49:af:
         c7:ed:46:0b:93:64:76:24:ba:c4:32:3c:90:c1:41:98:65:21:
         4e:60:18:f0:94:b5:72:91:f1:c7:d0:63:13:9c:b3:80:40:f0:
         07:0f:af:b2:a5:e7:fa:7a:1b:42:db:25:20:e6:ef:f5:18:a0:
         59:df:25:f8:29:e5:cc:a8:29:e2:23:7c:b8:05:54:ea:d6:a7:
         4b:1f:74:11:ba:1f:b4:fc:f5:14:ae:24:e2:b2:f7:69:cf:00:
         3d:7a:cd:87:98:e4:02:ae:0e:91:87:16:98:48:14:bb:5a:14:
         e7:2e:9d:d4:81:0c:ab:8c:fe:31:7e:5d:39:0e:52:a2:52:9b:
         8f:42:15:06:ba:69:97:03:ca:41:5b:92:04:20:ba:0e:8b:60:
         47:81:0e:a4:f2:e2:d4:8a:00:43:db:91:d5:9b:d9:ae:69:a1:
         48:75:ec:64:d3:50:76:a3:43:e5:70:70:c4:f6:de:a4:fd:6e:
         18:6e:e0:ff:99:4b:92:f6:e0:2c:64:8d:f1:01:a8:86:e6:70:
         49:a5:53:bb:30:d4:98:91:53:44:92:be:60:2a:3b:ff:28:2e:
         18:82:bd:49:fe:9b:7f:b1:8f:fd:ca:aa:d8:5b:9f:11:b8:73:
         29:dd:e1:40
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYloQ1tdWwmGMCf+BobgAXUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzhlNjQyOTllNTQ1ZDM2MzcwNzRjYjk0NmI0MDBmNzk5
MGVjZjQwHhcNMjMwNzE4MDkwOTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmFiZmY0Zjk5Yzg4YTM4MWEyMGVlNGVjMTJkYzc0ZTgwZjMxM2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW7WFAl7707psvMBq+RTTlMOPiVI
VGEADr9AxSezbb5sDWypqwcT5wZ1qUkb1Qy1/dweynaeFL+q0Zlraz+pmDq9rALU
7bpTdiw8nufsaui/46/b9icmTb69FLOsd8cwfVeOo7BeBBWYLnwwrwClT8Z6Ma8b
o17HogAqCzwVdUJpGVPdnW2h6hDkLCx+CR1Dux+sQujOY9IKND5v2Wm6NfhgIHtK
R2r1ufxewfu7NBOQZR7f85sNTJ6NdtFJcxkmef8rhNGMgsiE35x0ExTCpeddhR4S
X2MsoaIV0mcv9eZDo+YOxcLMnhoHR02Ubovr3UQJpgjzAWZl2WJBMaYPpwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFP+r/0+ZyIo4GiDuTsEtx06A8xPiMB8GA1UdIwQY
MBaAFAQ45kKZ5UXTY3B0y5RrQA95kOz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWIt
YzZkYzU4MTM3ZDA3LzEvXzZ2X1Q1bklpamdhSU81T3dTM0hUb0R6RS1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWItYzZkYzU4MTM3ZDA3
LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5u2gD
BAC5u2owDQYJKoZIhvcNAQELBQADggEBAJ29cvfbj/mDiVBB9r+k1R9Jr8ftRguT
ZHYkusQyPJDBQZhlIU5gGPCUtXKR8cfQYxOcs4BA8AcPr7Kl5/p6G0LbJSDm7/UY
oFnfJfgp5cyoKeIjfLgFVOrWp0sfdBG6H7T89RSuJOKy92nPAD16zYeY5AKuDpGH
FphIFLtaFOcundSBDKuM/jF+XTkOUqJSm49CFQa6aZcDykFbkgQgug6LYEeBDqTy
4tSKAEPbkdWb2a5poUh17GTTUHajQ+VwcMT23qT9bhhu4P+ZS5L24CxkjfEBqIbm
cEmlU7sw1JiRU0SSvmAqO/8oLhiCvUn+m3+xj/3KqthbnxG4cynd4UA=
-----END CERTIFICATE-----
Generated at Fri Aug 25 11:48:32 2023 by rpki-client on console-fra.rpki-client.org